GHSA-jvq4-cgfw-jgf4

ghsaUSosv

Cross site scripting in intelliants/subrion

view advisory published 2022-06-12Licence: CC-BY-4.0

An issue was discovered in Subrion CMS v4.2.1 There is a stored cross-site scripting (XSS) vulnerability that can execute malicious JavaScript code by modifying the name of the uploaded image, closing the html tag, or adding the onerror attribute.

describes (1)

Related CVEs.

ID	severity	EPSS	exploitable	published
CVE-2021-41502US	medium5.4	0.55% (46th)	—	2022-06-11
An issue was discovered in Subrion CMS v4.2.1 There is a stored cross-site scripting (XSS) vulnerability that can execute malicious JavaScript code by modifying the name of the upl…

references

External citations — patches, advisories, analysis.

https://github.com/intelliants/subrionPACKAGE
https://github.com/intelliants/subrion/issues/885WEB
https://nvd.nist.gov/vuln/detail/CVE-2021-41502ADVISORY

scry

Advisories like this name the exposed products attackers go after on your perimeter. See what is exposed on your perimeter with a free passive scan.

Free scan